siemens / continuous-clearingLinks
The Continuous Clearing Tool scans and collects third-party open-source components used in projects based on NPM, NuGet, Debian, Maven, Python, Conan, Alpine, and Cargo. It then uploads the collected data to SW360 and FOSSology for license clearing, using the respective project ID provided.
☆29Updated last week
Alternatives and similar repositories for continuous-clearing
Users that are interested in continuous-clearing are comparing it to the libraries listed below
Sorting:
- Service to scan licenses from source code☆12Updated 2 years ago
- OSS License Open Data☆12Updated 6 years ago
- SBOM Search - Context aware search in SBOM repositories☆29Updated last month
- sbomasm: The Complete SBOM Management Toolkit☆97Updated 2 weeks ago
- Utility that provides an API platform for validating, querying and managing BOM data☆124Updated 3 months ago
- Validate the SPDX SBOM against NTIA, CISA, and other minimum element requirements.☆75Updated last week
- SupplyShield is an open-source application security orchestration framework designed to secure your software supply chain from vulnerabil…☆15Updated 3 weeks ago
- CaPyCLI - Python scripts for software license compliance automation with SW360☆21Updated this week
- Publications done by Double Open.☆16Updated 5 years ago
- PURL to CPE Relationship mapping project.☆106Updated this week
- Generate VEX (Vulnerability Exploitability Exchange) CycloneDX documents☆24Updated 11 months ago
- OSADL license compatibility matrix as a CSV☆17Updated last year
- Utility that converts SBOM documents from CycloneDX to SPDX☆33Updated last year
- Library to ingest and generate SBOMs☆35Updated last week
- The Keep It Simple Software Bill of Material☆11Updated 3 years ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆95Updated 2 weeks ago
- Automating Compliance Tooling Project☆22Updated 3 years ago
- This tool compares two Software Bill of Materials (SBOMs) and reports the differences.☆40Updated last year
- A place to systematically store software bill of materials (SBOM) documents.☆49Updated 2 years ago
- sbomqs: The Comprehensive SBOM Quality & Compliance Tool☆258Updated this week
- Report on quality of SBOM contents☆24Updated last year
- Produce an Open Source Vulnerability JSON file based on information in an SPDX document☆65Updated last year
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆111Updated 3 weeks ago
- A light-weight app to audit and inventory large codebases for open source license compliance.☆69Updated this week
- The model for the information captured in SPDX version 3 standard.☆97Updated 3 weeks ago
- Project providing insights on the metaeffekt license database.☆12Updated 3 weeks ago
- This is a mapping of CPEs to package urls created by using VulnerableCode's data☆10Updated 5 years ago
- The International FOSS Law Book, v.2 and onwards☆14Updated 3 years ago
- ☆120Updated 8 months ago
- Parse and compare all the package versions and all the ranges. From debian, npm, pypi, ruby and more. Process all the version range specs…☆38Updated last month